From 80ee6f7dc57720f4e9ca07e2b49041babbac5410 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Nicolas=20Mass=C3=A9?= <nicolas.masse@itix.fr>
Date: Mon, 15 Jan 2018 17:46:08 +0100
Subject: [PATCH] Use the centos base image to embed a system SSL/TLS
 truststore

---
 Dockerfile | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index ce05422..da58c67 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,5 +1,15 @@
-FROM scratch
+# We use the centos base image (and not the "scratch" base image) because we need
+# a default trust store (aka SSL/TLS trusted certificates).
+# 
+# If you want to rebuild this image using the "scratch" base image, make sure to mount a 
+# copy of the system truststore at a supported location. 
+# 
+# See :
+#  - https://golang.org/src/crypto/x509/root_unix.go
+#  - https://golang.org/src/crypto/x509/root_linux.go
+FROM centos:centos7
 COPY apicast-sidecar-proxy /apicast-sidecar-proxy
 EXPOSE 9090 9091
 ENTRYPOINT [ "/apicast-sidecar-proxy" ]
+CMD [ ]